p PatchFirst

PatchFirst · Latest vulnerabilities

azure.mcp vulnerabilities

Vulnerabilities published for azure.mcp in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-26118

    High · CVSS 8.8EPSS 1%Fix available

    Azure MCP Server Tools Elevation of Privilege Vulnerability

    Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

    • Update to 1.0.2
    • Update to 2.0.0-beta.17
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →